CVE-2026-62895

Description

Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network.

Traduire en français

Produits concernés

• Microsoft Azure Arc SQL Server Extension
• Microsoft azure arc sql server extension

Scores CVSS

Faiblesses (CWE)

• CWE-89
• CWE-942
• CWE-1390

Références

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62895 PatchVendor Advisory

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories